283c444e418f8cc9acee6342501c3ec4_JaffaCakes118 | Triage

Sharing

General

Target

283c444e418f8cc9acee6342501c3ec4_JaffaCakes118
Size

60KB
MD5

283c444e418f8cc9acee6342501c3ec4
SHA1

c1b0732a04f30215ca4a64ed239b3d4ad2c31868
SHA256

1149478bf8814dda8f667b6d0e34d68bd801d976738cdd85488f88ec9e51ed7a
SHA512

00af46211b0698bc23ff888d26f519fd325b35e57f612fe862c519efb9da7b8802a3d07ff13251556e925f1fb7cea7b4d7fb9ac564ffa8163412d35e4c7a53a7
SSDEEP

768:dvRA7rPwY/516bMD+soc2m+8uIkSC5S4maxa9/7INFUQIODOJ:dvRA7Dp1ym+MVuw/2FUQba

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
283c444e418f8cc9acee6342501c3ec4_JaffaCakes118

Files

283c444e418f8cc9acee6342501c3ec4_JaffaCakes118
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\projects\branches\saturn\agent\HandlerFactory\obj\Debug\Com.Aternity.Agent.HandlerFactory.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ